This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer File: v2wd9mI3TUrs0Miz-EMS30ISVZk.cer (raw, json) Hash identifier: BcATAd7VnjgOkO+TVabV/TL6SRJl1/dWzM46moGmawI= Subject key identifier: BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA44C27FE72B2D1D7C242B79FEE7C7D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:17:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.33.184.0/24 IP: 2a07:f000::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:4c:27:fe:72:b2:d1:d7:c2:42:b7:9f:ee:7c:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf6c1df662374d4aecd0c8b3f84312df42125599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:aa:da:c2:88:95:dd:97:3b:fa:43:ca:3d:33: c0:34:0e:33:0f:f1:47:a7:e4:41:f2:be:06:51:21: 4c:4f:57:40:bd:3c:34:64:19:81:52:d5:94:af:a0: c6:06:f6:6b:91:5a:d6:78:e4:22:43:47:2f:42:c9: e9:94:8c:26:91:ae:5e:ef:6d:42:b3:5c:7c:42:e4: 5d:dd:19:a1:ca:8b:db:86:fa:dc:46:3a:6e:cb:ed: 6b:ab:21:70:2d:26:05:6a:f7:25:55:c8:86:98:20: 74:ea:5a:25:e3:99:66:c2:97:25:4a:ba:af:46:f5: 9a:6c:06:8c:c4:fe:66:61:7b:4f:58:95:3c:a0:20: ae:68:6d:2c:f5:9f:2a:71:35:68:f6:a6:2c:1d:2e: 74:31:5f:5b:b8:51:4f:4c:f7:3e:a9:91:9a:c3:fa: e3:66:2e:57:62:a3:30:6b:e4:12:bf:21:f2:4b:36: 54:57:f1:ac:1a:a9:14:b5:08:0c:1a:ca:85:7b:08: 55:47:95:4d:22:96:d7:bd:e0:06:82:49:5b:9d:7a: f3:cc:49:55:f1:d8:81:07:37:60:ff:ba:01:46:cb: 4d:8c:d0:e3:f4:03:92:2c:3f:10:38:d5:53:25:58: 6c:50:f8:95:28:ee:63:4d:77:a7:a5:aa:50:ba:3c: ba:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.33.184.0/24 IPv6: 2a07:f000::/32 Signature Algorithm: sha256WithRSAEncryption 73:ba:25:eb:ef:33:ad:79:66:36:c5:72:11:bc:d3:bb:65:28: 8c:e2:9a:f4:e2:12:1c:7a:14:bd:15:ae:80:99:7c:18:ef:f9: d0:29:b6:1a:10:17:c5:68:fb:be:bc:94:ad:87:95:08:d7:06: 68:e3:5d:a8:4a:c6:d8:dc:4d:20:89:3b:2f:85:b1:7a:0a:a6: 9b:c4:57:b3:13:3f:db:d0:0b:51:b9:72:82:d9:e6:4b:f0:cb: 0f:b6:6e:58:f8:e8:13:05:93:c8:ed:be:10:ca:f7:28:40:ff: 7e:cf:ec:5f:93:ef:f5:51:7d:6b:af:32:09:c6:81:9c:fe:74: 1f:17:fe:6f:bb:39:5d:58:7c:24:de:d8:73:6c:bf:65:9e:68: 5d:b1:59:85:fb:67:d6:a9:6a:5d:51:44:95:86:ed:fd:59:75: 35:24:50:f6:89:f2:ed:b3:26:20:47:18:bb:7e:75:88:33:6f: 27:0f:f7:2d:b9:29:69:b0:f2:ec:1f:ad:e6:9c:38:17:4b:8d: cf:78:c9:a2:4c:25:61:b8:7b:62:3d:28:80:bb:ac:ae:26:02: 84:f6:19:08:e7:f4:9a:88:59:b7:ac:a3:b5:5b:09:56:27:91: 43:63:cb:c6:ce:b8:bd:29:0f:e6:09:81:90:ef:0d:47:f1:cb: 35:00:1b:42 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt+pEwn/nKy0dfCQref7nx9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjZjMWRmNjYyMzc0ZDRhZWNkMGM4YjNmODQzMTJkZjQyMTI1NTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qrawoiV3Zc7+kPKPTPANA4zD/FH p+RB8r4GUSFMT1dAvTw0ZBmBUtWUr6DGBvZrkVrWeOQiQ0cvQsnplIwmka5e721C s1x8QuRd3RmhyovbhvrcRjpuy+1rqyFwLSYFavclVciGmCB06lol45lmwpclSrqv RvWabAaMxP5mYXtPWJU8oCCuaG0s9Z8qcTVo9qYsHS50MV9buFFPTPc+qZGaw/rj Zi5XYqMwa+QSvyHySzZUV/GsGqkUtQgMGsqFewhVR5VNIpbXveAGgklbnXrzzElV 8diBBzdg/7oBRstNjNDj9AOSLD8QONVTJVhsUPiVKO5jTXenpapQujy63wIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFL9sHfZiN01K7NDIs/hDEt9CElWZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ1L2ZkMjIw Yi01ZjcwLTQ5YzItOWNjNy05MDg0MTlkMzk0MDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDUvZmQyMjBi LTVmNzAtNDljMi05Y2M3LTkwODQxOWQzOTQwMS8xL3Yyd2Q5bUkzVFVyczBNaXot RU1TMzBJU1Zaay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwiG4MA0EAgACMAcDBQAqB/AAMA0GCSqGSIb3 DQEBCwUAA4IBAQBzuiXr7zOteWY2xXIRvNO7ZSiM4pr04hIcehS9Fa6AmXwY7/nQ KbYaEBfFaPu+vJSth5UI1wZo412oSsbY3E0giTsvhbF6CqabxFezEz/b0AtRuXKC 2eZL8MsPtm5Y+OgTBZPI7b4QyvcoQP9+z+xfk+/1UX1rrzIJxoGc/nQfF/5vuzld WHwk3thzbL9lnmhdsVmF+2fWqWpdUUSVhu39WXU1JFD2ifLtsyYgRxi7fnWIM28n D/ctuSlpsPLsH63mnDgXS43PeMmiTCVhuHtiPSiAu6yuJgKE9hkI5/SaiFm3rKO1 WwlWJ5FDY8vGzri9KQ/mCYGQ7w1H8cs1ABtC -----END CERTIFICATE-----Generated at Sun Jan 25 21:29:45 2026 by rpki-client